unpatentable over Shi in view of Wagner (U.S. Patent No. 6,085,224). Applicant respectfully 
traverses the rejections of claims 1-15. 



Rejections Based Upon 35 U,S.C> S102(b) 

With respect to independent claims 1, 7, 8, 13 and 14, the cited art is simply not directed 
to the same issues as the current application. Unlike Applicant's claimed subject matter, Shi is 
directed at maintaining a secure connection between a client and a server by providing the client 
with a cookie that is transmitted in conjunction with file requests. In other words, Shi is not 
concerned with "unmodifiable" cookies because the unique ID of Shi's cookie needs to match 
the host login ID. Thus, a modification of the cookie by the client makes the cookie inoperable 
by breaking the security link. In contrast, the present application prevents the user from 
modifying a cookie. 

Further, Shi transmits two cookies rather than one fi*om the server to the client, neither of 
which can be characterized as including state information. The first cookie contains a "URL 
identified by the HTTP request" (col. 3, lines 27-28) and the second cookie contains a "unique 
identifier [] generated for the authenticated user and used as a pointer to the credentials database" 
(col. 3, lines 37-39). 

Therefore, there is nothing in Shi that either teaches or suggests that Shi's cookie is 
"unmodifiable." Shi does not anticipate the presently claimed invention because he does not 
teach the elements of "transmitting an unmodifiable cookie" or "storing the unmodifiable 
cookie." In fact as mentioned above, Shi replaces a first cookie with a second cookie, an action 
which is most certainly a modification. 

In order to describe the "unmodifiable" nature of Applicant's cookie. Applicant's 
Specification includes several examples of techniques that can be employed to guarantee this 
aspect of the claims. For example, one technique involves using an encryption code know only 
to the web browser (T|32). Another disclosed technique employs public and provate cookie files 
(136). In short, unlike the current application, Shi neither teaches nor suggests an unmodifiable 
cookie containing state information. 

With respect to claims 3 and 9, Shi does not teach or suggest storing a single cookie in 
two different files , a public file and a private file. Rather, Shi is directed to the storage of a 
multiple files, some of which are protected by Web server security and some protected by DFS 
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security. For example, Shi refers to "both the documents stored on the server local directory 
(protected by Web server security) and DFS (protected by DFS security)" (col. 2, lines 8-10). In 
other words, Shi is describing multiple documents rather than a single document. Further, Shi 
describes the problem of a user being prompted for a userid and a password every time "there is 
a switch from DFS document to web server document, and vice versa" (col. 2, lines 34-36). 
Clearly, Shi is talking about at least two different documents. 

With respect to claims 4 and 10, the Office Action mischaracterizes performing a path 
check as "checking the public cookie file for a matching unmodifiable cookie." As mentioned 
above, Shi does not maintain two copies of a single file. Further, performing a path check 
typically involves an attempt to access a particular file rather than any attempt to "match" files. 

With respect to claims 5 and 1 1, the same rationale applies as stated above in conjunction 
with claims 4 and 10. 

Rejections Based Upon 35 U.S.C. S103(a) 

With respect to claims 6 and 12, Wagner is directed at refreshing a public cookie by 
sending HTML files from a server to update an area within a previously transmitted page or, in 
other words, updating the cookie because an area within the previously transmitted page has 
been modified . This cannot be characterized as "updating the public cookie file to reflect the 
unmodifiable cookies found in the private cookie file." Obviously, Wagner is only updating the 
pubhc cookie, when that which he is copying has been modified. 

In addition, in order to reject a claim based upon 35 U.S.C. §103(a), there must be some 
motivation to combine the references. "[T]o enhance the enterprise environment to take 
advantage of scalability, file availability and security features of DFS" is a recitation of an 
advantage rather than a motivation. 



In order to reject a claimed invention under § 102(b), the cited reference must teach every 
aspect of the claimed invention either exphcitly or impliedly. (M.P.E.P. §706.02). To establish 
prima facie obviousness of a claimed invention under §10c(a), all the claim limitafions must be 
taught or suggested by the prior art. (M.P.E.P., §2143,03, citing in re Royka, 490 F.2d 981; 180 
U.S.P.Q. 580 (CCPA 1974)). In addition, "All words in a claim must be considered in judging 
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the patentability of that claim against prior art." (M, citing In re Wilson^ 424 F.2d 1382, 1385; 
165 U.S.P.Q. 494, 496 (CCPA 1970); emphasis added). 

Since, Shi does not teach or suggest aspects, described above, of the Apphcant's claimed 
subject matter. Applicant respectfully requests withdrawal of the § 102(b) and §103 (a) rejections 
of claim 1, 7, 8, 13 and 14. In addition to the reasons stated above, claims 2-6, 9-12 and 15 are 
allowable as being dependent upon allowable base claims and Applicants respectfully request 
withdrawal of these rejections and allowance or these claims as well. Thus, allowance of the 
claims is respectfully submitted. 

It is respectfully submitted that all issues and rejections have been adequately addressed 
and that pending claims 1-15 are allowable and that the case should be advanced to issuance. If 
the Examiner has any questions or wishes to discuss the claims, the Examiner is encouraged to 
call the undersigned at the telephone number indicated below. 



Hulsey Grether + Fortkort, LLP 
891 1 N. Capital of Texas Highway 
Austin, Texas 78759 
Telephone: (512)279-3106 
Facsimile: (512)229-3101 




Respectfully submitted, 



Date: June 28, 2004 
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